Firefox 2.0.0.2 released: Closes security holes

mozilla.org has released Firefox 2.0.0.2, the latest version of its popular open source Web browser.

In the Mac OS X edition, security refinements are the focal point for this release. Among the flaws eliminated:

• MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks
• MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow
• MFSA 2007-05 XSS and local file access by opening blocked popups
• MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot
• MFSA 2007-03 Information disclosure through cache collisions
• MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks
• MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2)

The new release is available as a 17.6 MB download.

Problems with this release? Please let us know.

Resources

Firefox 2.0.0.2

MFSA 2007-07

MFSA 2007-06

MFSA 2007-05

MFSA 2007-04

MFSA 2007-03

MFSA 2007-02

MFSA 2007-01

17.6 MB download

let us know

More from Late-Breakers